CVE-2023-4194
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A flaw was found in the Linux kernel's TUN/TAP functionality, which could allow a local user to bypass network filters and gain unauthorized access to some resources. The issues stem from incorrect or incomplete patches for CVE-2023-1076.
Risk Assessment
This vulnerability poses a risk of unauthorized access to network resources, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update the Linux kernel to the latest version to patch this vulnerability and to monitor access to network resources.
Original NVD description (English source)
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 ("tun: tun_chr_open(): correctly initialize socket uid"), - 66b2c338adce ("tap: tap_open(): correctly initialize socket uid"), pass "inode->i_uid" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.